Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
File: XY9AsSSN49pfXWCX-BBoKTxL7vc.mft (raw, json)
Hash identifier: FcUSIE8NfWYcfTYg/eN9v0FDqtRIs9S7kZJ1yOc0W5o=
Subject key identifier: 77:B4:AB:16:04:F5:01:B0:82:77:6A:63:2B:1A:9A:02:71:21:D2:CF
Authority key identifier: 5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
Certificate issuer: /CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Certificate serial: 019D284DCFA58A6E14D07F4C2D292271CDCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
Manifest number: 01B2
Signing time: Thu 26 Mar 2026 04:01:21 +0000
Manifest this update: Thu 26 Mar 2026 04:01:21 +0000
Manifest next update: Fri 27 Mar 2026 04:01:21 +0000
Files and hashes: 1: XY9AsSSN49pfXWCX-BBoKTxL7vc.crl (hash: V8reSYQ2KH+RVo6gpr46ys7fjjeTlgYRtXsTdPMM7No=)
2: _a7gNZLlQxgHn1SWkyljxM4Vp8E.roa (hash: riqb9ZgtO6K145lOcaQYpYRovN3sqPG5Tn86hViYkIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:cf:a5:8a:6e:14:d0:7f:4c:2d:29:22:71:cd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Validity
Not Before: Mar 26 04:01:21 2026 GMT
Not After : Mar 27 04:01:21 2026 GMT
Subject: CN=77b4ab1604f501b082776a632b1a9a027121d2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:07:61:28:b5:09:57:ce:06:95:ce:58:62:
8b:13:fc:2f:70:d0:63:16:23:a2:d8:37:30:e2:19:
f5:0e:12:bc:24:24:30:66:6d:03:57:06:ff:0a:da:
25:f0:82:80:f9:d8:63:66:2b:29:02:8e:57:09:7b:
d4:ac:80:8e:f6:ae:ae:df:4c:1b:4d:98:6a:64:18:
98:60:f3:2c:01:04:4d:ae:02:f2:3b:0a:0f:4c:3b:
20:f5:6c:08:5e:7c:35:8d:3d:b0:f2:a4:f6:54:2d:
68:74:20:63:0e:bb:b7:a8:ab:b5:e1:2d:c8:0e:25:
8b:5a:32:29:da:f5:87:01:f0:fe:f6:ea:a3:da:90:
3e:c0:d5:47:8c:41:5b:d8:f3:0a:d8:4a:e6:7c:6c:
2f:79:6d:b0:81:c9:67:1a:4e:2e:55:1f:24:1c:e9:
53:40:0c:5c:cd:1c:a1:fd:2a:1c:83:0c:0e:b0:44:
64:e3:b3:5e:04:76:35:12:6e:a5:40:70:bf:53:26:
85:9a:c3:b5:b0:d1:f1:e6:9a:76:27:54:a1:97:1b:
6d:ad:a5:14:e9:33:98:40:14:2c:32:c3:03:06:30:
23:51:e5:7d:fd:2d:35:6f:36:e5:8b:31:3f:77:12:
ec:63:82:91:0a:99:47:ce:3d:cd:b0:5c:c7:96:50:
df:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B4:AB:16:04:F5:01:B0:82:77:6A:63:2B:1A:9A:02:71:21:D2:CF
X509v3 Authority Key Identifier:
keyid:5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6d:02:71:bc:90:78:63:94:ca:cc:62:33:aa:ab:53:f0:78:
c9:74:21:b1:85:40:7c:24:7f:5e:a4:2e:5c:84:f2:b4:75:f9:
99:0b:43:55:3b:20:44:b6:64:ef:d6:3f:b4:dc:9a:f8:85:3c:
c1:5c:3a:d9:5b:0a:80:c7:84:45:5c:bc:1e:4f:d8:b9:bc:be:
35:db:05:34:46:81:c2:59:01:0a:65:9d:56:b7:fc:52:82:0c:
b8:f9:36:24:5c:2e:4c:55:66:a3:1a:a3:f2:1b:cc:21:f8:ad:
6d:f0:48:5e:1b:76:0b:0c:dc:ea:58:68:29:b3:91:c1:46:87:
35:b3:2f:ab:44:6d:17:dc:70:d4:49:a8:71:c1:76:a2:80:18:
bf:e8:94:5f:2d:85:6e:5b:58:83:1a:4e:ea:45:92:b4:db:90:
5d:47:b0:8e:c6:ed:6d:89:a7:6d:86:d1:0d:09:f7:ae:f5:ec:
5c:34:9c:dd:9e:75:d9:e1:79:a7:a9:3d:40:8c:47:65:55:e3:
dc:2c:47:64:62:f3:46:df:7d:09:dd:e8:31:db:28:40:5f:8f:
6b:91:7b:11:2c:33:5a:e3:a4:6a:9e:fa:5a:90:b9:24:65:2a:
7e:46:1a:8c:f2:7d:55:1f:fb:2e:f4:72:1d:b8:ae:98:59:c5:
be:16:2b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:29 2026 by rpki-client